Split user/group creation into its own recipe & test it